Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
File:                     tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer (raw, json)
Hash identifier:          RVAqfsH0ksNLwbQCZlbP6zRsfD/rhJhlEmJ0wSLCpQg=
Subject key identifier:   B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942369A599E3C9FC28169563743301D682
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48987

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:a5:99:e3:c9:fc:28:16:95:63:74:33:01:d6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:e9:a1:02:a2:8e:7c:9a:50:49:ef:22:6f:
                    d7:0d:b1:25:15:fe:d3:93:39:71:ac:af:ec:b0:de:
                    71:13:65:68:d9:d6:61:40:09:12:96:c3:60:29:1c:
                    24:09:07:dc:ce:2b:67:f7:23:d6:40:5a:23:c2:87:
                    69:38:02:0f:40:b3:1e:dd:4b:a5:f5:24:9a:24:7a:
                    58:bd:cd:ce:63:7b:c1:a0:aa:1a:a8:1c:a6:18:61:
                    b5:b1:45:20:65:9e:6d:47:ca:98:26:fe:10:09:c3:
                    11:a5:d9:00:56:a7:75:44:77:69:3f:82:51:c2:dd:
                    56:20:15:d2:ac:75:49:29:f0:ed:55:de:41:1f:00:
                    74:2b:f5:1c:9e:c8:5a:89:c8:f3:ea:20:7f:da:c4:
                    e2:e5:18:d1:1d:56:88:a2:0b:76:18:98:9f:3b:d1:
                    68:8c:e6:6b:25:47:a0:6d:0c:2a:5f:c5:a9:3c:d4:
                    d1:35:99:5a:76:7e:fd:93:8c:6d:fc:69:84:02:5d:
                    01:27:75:d0:b7:26:aa:f2:4c:0c:cb:b4:6b:60:70:
                    6c:36:f8:da:c7:1a:25:fa:a9:e9:53:d8:95:41:4d:
                    a7:6b:2a:49:ad:d8:51:80:8d:06:f6:f7:58:e2:49:
                    61:aa:f9:cb:6b:65:f6:d2:f2:c5:c6:a2:e9:b6:66:
                    17:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48987

    Signature Algorithm: sha256WithRSAEncryption
         0d:69:c2:a5:e0:4d:e0:4f:c7:1c:d1:f9:87:b4:03:8b:50:b4:
         0a:a3:2e:25:b0:c1:2a:06:e0:30:5d:3b:47:7a:2b:18:4c:52:
         3f:45:30:01:e0:f0:f1:7f:d3:7f:61:e3:81:6e:08:e7:c8:5f:
         e0:ed:8d:ff:a8:bc:76:e0:31:99:c1:8e:40:11:7f:c2:73:de:
         94:57:de:e0:bc:bd:41:6b:bb:b9:1b:84:41:6e:af:53:a1:a3:
         46:38:ab:d8:08:18:af:e6:09:3b:99:44:0b:e0:fb:d5:a8:4d:
         5f:a7:8d:e0:ca:1c:d8:38:e3:8d:3c:11:65:98:77:a8:08:cd:
         03:60:33:d7:3f:75:bc:19:8d:a9:21:b6:a9:b0:5b:d2:9b:8e:
         1a:16:f9:c7:80:f9:06:2e:78:3b:17:71:e3:2e:32:16:1e:e1:
         cd:7e:83:65:8e:6a:7a:ef:1a:63:dc:a9:e6:96:ae:8a:00:63:
         fa:8f:a4:7d:d8:42:0e:3b:2b:30:e6:2e:3b:ec:ec:6d:41:7e:
         8d:da:5c:cc:71:4d:1a:99:f9:2f:df:3a:0b:a4:60:9d:d5:87:
         df:e9:a7:ea:3e:14:46:c1:42:bf:22:f6:b6:fa:d6:fc:53:66:
         70:d2:68:26:6f:e6:97:57:67:8e:46:6e:cb:8f:65:04:ff:53:
         bf:12:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----